pulumi-gcp 8.25.0a1743489606__py3-none-any.whl → 8.25.0a1743706148__py3-none-any.whl

pulumi_gcp/networksecurity/outputs.py

@@ -65,10 +65,16 @@ __all__ = [
     'InterceptEndpointGroupConnectedDeploymentGroup',
     'InterceptEndpointGroupConnectedDeploymentGroupLocation',
     'MirroringDeploymentGroupConnectedEndpointGroup',
+    'MirroringDeploymentGroupLocation',
+    'MirroringEndpointGroupAssociation',
+    'MirroringEndpointGroupAssociationLocation',
     'MirroringEndpointGroupAssociationLocationsDetail',
+    'MirroringEndpointGroupConnectedDeploymentGroup',
+    'MirroringEndpointGroupConnectedDeploymentGroupLocation',
     'SecurityProfileCustomInterceptProfile',
     'SecurityProfileCustomMirroringProfile',
     'SecurityProfileThreatPreventionProfile',
+    'SecurityProfileThreatPreventionProfileAntivirusOverride',
     'SecurityProfileThreatPreventionProfileSeverityOverride',
     'SecurityProfileThreatPreventionProfileThreatOverride',
     'ServerTlsPolicyMtlsPolicy',
@@ -2743,6 +2749,159 @@ class MirroringDeploymentGroupConnectedEndpointGroup(dict):
         return pulumi.get(self, "name")
 
 
+@pulumi.output_type
+class MirroringDeploymentGroupLocation(dict):
+    def __init__(__self__, *,
+                 location: Optional[str] = None,
+                 state: Optional[str] = None):
+        """
+        :param str location: The cloud location of the deployment group, currently restricted to `global`.
+        :param str state: (Output)
+               The current state of the association in this location.
+               Possible values:
+               STATE_UNSPECIFIED
+               ACTIVE
+               OUT_OF_SYNC
+        """
+        if location is not None:
+            pulumi.set(__self__, "location", location)
+        if state is not None:
+            pulumi.set(__self__, "state", state)
+
+    @property
+    @pulumi.getter
+    def location(self) -> Optional[str]:
+        """
+        The cloud location of the deployment group, currently restricted to `global`.
+        """
+        return pulumi.get(self, "location")
+
+    @property
+    @pulumi.getter
+    def state(self) -> Optional[str]:
+        """
+        (Output)
+        The current state of the association in this location.
+        Possible values:
+        STATE_UNSPECIFIED
+        ACTIVE
+        OUT_OF_SYNC
+        """
+        return pulumi.get(self, "state")
+
+
+@pulumi.output_type
+class MirroringEndpointGroupAssociation(dict):
+    def __init__(__self__, *,
+                 name: Optional[str] = None,
+                 network: Optional[str] = None,
+                 state: Optional[str] = None):
+        """
+        :param str name: (Output)
+               The connected deployment group's resource name, for example:
+               `projects/123456789/locations/global/mirroringDeploymentGroups/my-dg`.
+               See https://google.aip.dev/124.
+        :param str network: (Output)
+               The associated network, for example:
+               projects/123456789/global/networks/my-network.
+               See https://google.aip.dev/124.
+        :param str state: (Output)
+               The current state of the association in this location.
+               Possible values:
+               STATE_UNSPECIFIED
+               ACTIVE
+               OUT_OF_SYNC
+        """
+        if name is not None:
+            pulumi.set(__self__, "name", name)
+        if network is not None:
+            pulumi.set(__self__, "network", network)
+        if state is not None:
+            pulumi.set(__self__, "state", state)
+
+    @property
+    @pulumi.getter
+    def name(self) -> Optional[str]:
+        """
+        (Output)
+        The connected deployment group's resource name, for example:
+        `projects/123456789/locations/global/mirroringDeploymentGroups/my-dg`.
+        See https://google.aip.dev/124.
+        """
+        return pulumi.get(self, "name")
+
+    @property
+    @pulumi.getter
+    def network(self) -> Optional[str]:
+        """
+        (Output)
+        The associated network, for example:
+        projects/123456789/global/networks/my-network.
+        See https://google.aip.dev/124.
+        """
+        return pulumi.get(self, "network")
+
+    @property
+    @pulumi.getter
+    def state(self) -> Optional[str]:
+        """
+        (Output)
+        The current state of the association in this location.
+        Possible values:
+        STATE_UNSPECIFIED
+        ACTIVE
+        OUT_OF_SYNC
+        """
+        return pulumi.get(self, "state")
+
+
+@pulumi.output_type
+class MirroringEndpointGroupAssociationLocation(dict):
+    def __init__(__self__, *,
+                 location: Optional[str] = None,
+                 state: Optional[str] = None):
+        """
+        :param str location: The cloud location of the association, currently restricted to `global`.
+               
+               
+               - - -
+        :param str state: (Output)
+               The current state of the association in this location.
+               Possible values:
+               STATE_UNSPECIFIED
+               ACTIVE
+               OUT_OF_SYNC
+        """
+        if location is not None:
+            pulumi.set(__self__, "location", location)
+        if state is not None:
+            pulumi.set(__self__, "state", state)
+
+    @property
+    @pulumi.getter
+    def location(self) -> Optional[str]:
+        """
+        The cloud location of the association, currently restricted to `global`.
+
+
+        - - -
+        """
+        return pulumi.get(self, "location")
+
+    @property
+    @pulumi.getter
+    def state(self) -> Optional[str]:
+        """
+        (Output)
+        The current state of the association in this location.
+        Possible values:
+        STATE_UNSPECIFIED
+        ACTIVE
+        OUT_OF_SYNC
+        """
+        return pulumi.get(self, "state")
+
+
 @pulumi.output_type
 class MirroringEndpointGroupAssociationLocationsDetail(dict):
     def __init__(__self__, *,
@@ -2790,6 +2949,88 @@ class MirroringEndpointGroupAssociationLocationsDetail(dict):
         return pulumi.get(self, "state")
 
 
+@pulumi.output_type
+class MirroringEndpointGroupConnectedDeploymentGroup(dict):
+    def __init__(__self__, *,
+                 locations: Optional[Sequence['outputs.MirroringEndpointGroupConnectedDeploymentGroupLocation']] = None,
+                 name: Optional[str] = None):
+        """
+        :param Sequence['MirroringEndpointGroupConnectedDeploymentGroupLocationArgs'] locations: (Output)
+               The list of locations where the deployment group is present.
+               Structure is documented below.
+        :param str name: (Output)
+               The connected deployment group's resource name, for example:
+               `projects/123456789/locations/global/mirroringDeploymentGroups/my-dg`.
+               See https://google.aip.dev/124.
+        """
+        if locations is not None:
+            pulumi.set(__self__, "locations", locations)
+        if name is not None:
+            pulumi.set(__self__, "name", name)
+
+    @property
+    @pulumi.getter
+    def locations(self) -> Optional[Sequence['outputs.MirroringEndpointGroupConnectedDeploymentGroupLocation']]:
+        """
+        (Output)
+        The list of locations where the deployment group is present.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "locations")
+
+    @property
+    @pulumi.getter
+    def name(self) -> Optional[str]:
+        """
+        (Output)
+        The connected deployment group's resource name, for example:
+        `projects/123456789/locations/global/mirroringDeploymentGroups/my-dg`.
+        See https://google.aip.dev/124.
+        """
+        return pulumi.get(self, "name")
+
+
+@pulumi.output_type
+class MirroringEndpointGroupConnectedDeploymentGroupLocation(dict):
+    def __init__(__self__, *,
+                 location: Optional[str] = None,
+                 state: Optional[str] = None):
+        """
+        :param str location: The cloud location of the endpoint group, currently restricted to `global`.
+        :param str state: (Output)
+               The current state of the association in this location.
+               Possible values:
+               STATE_UNSPECIFIED
+               ACTIVE
+               OUT_OF_SYNC
+        """
+        if location is not None:
+            pulumi.set(__self__, "location", location)
+        if state is not None:
+            pulumi.set(__self__, "state", state)
+
+    @property
+    @pulumi.getter
+    def location(self) -> Optional[str]:
+        """
+        The cloud location of the endpoint group, currently restricted to `global`.
+        """
+        return pulumi.get(self, "location")
+
+    @property
+    @pulumi.getter
+    def state(self) -> Optional[str]:
+        """
+        (Output)
+        The current state of the association in this location.
+        Possible values:
+        STATE_UNSPECIFIED
+        ACTIVE
+        OUT_OF_SYNC
+        """
+        return pulumi.get(self, "state")
+
+
 @pulumi.output_type
 class SecurityProfileCustomInterceptProfile(dict):
     @staticmethod
@@ -2869,7 +3110,9 @@ class SecurityProfileThreatPreventionProfile(dict):
     @staticmethod
     def __key_warning(key: str):
         suggest = None
-        if key == "severityOverrides":
+        if key == "antivirusOverrides":
+            suggest = "antivirus_overrides"
+        elif key == "severityOverrides":
             suggest = "severity_overrides"
         elif key == "threatOverrides":
             suggest = "threat_overrides"
@@ -2886,9 +3129,12 @@ class SecurityProfileThreatPreventionProfile(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
+                 antivirus_overrides: Optional[Sequence['outputs.SecurityProfileThreatPreventionProfileAntivirusOverride']] = None,
                  severity_overrides: Optional[Sequence['outputs.SecurityProfileThreatPreventionProfileSeverityOverride']] = None,
                  threat_overrides: Optional[Sequence['outputs.SecurityProfileThreatPreventionProfileThreatOverride']] = None):
         """
+        :param Sequence['SecurityProfileThreatPreventionProfileAntivirusOverrideArgs'] antivirus_overrides: Defines what action to take for antivirus threats per protocol.
+               Structure is documented below.
         :param Sequence['SecurityProfileThreatPreventionProfileSeverityOverrideArgs'] severity_overrides: The configuration for overriding threats actions by severity match.
                Structure is documented below.
         :param Sequence['SecurityProfileThreatPreventionProfileThreatOverrideArgs'] threat_overrides: The configuration for overriding threats actions by threat id match.
@@ -2896,11 +3142,22 @@ class SecurityProfileThreatPreventionProfile(dict):
                and threat overrides, the threat overrides action is applied.
                Structure is documented below.
         """
+        if antivirus_overrides is not None:
+            pulumi.set(__self__, "antivirus_overrides", antivirus_overrides)
         if severity_overrides is not None:
             pulumi.set(__self__, "severity_overrides", severity_overrides)
         if threat_overrides is not None:
             pulumi.set(__self__, "threat_overrides", threat_overrides)
 
+    @property
+    @pulumi.getter(name="antivirusOverrides")
+    def antivirus_overrides(self) -> Optional[Sequence['outputs.SecurityProfileThreatPreventionProfileAntivirusOverride']]:
+        """
+        Defines what action to take for antivirus threats per protocol.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "antivirus_overrides")
+
     @property
     @pulumi.getter(name="severityOverrides")
     def severity_overrides(self) -> Optional[Sequence['outputs.SecurityProfileThreatPreventionProfileSeverityOverride']]:
@@ -2922,6 +3179,39 @@ class SecurityProfileThreatPreventionProfile(dict):
         return pulumi.get(self, "threat_overrides")
 
 
+@pulumi.output_type
+class SecurityProfileThreatPreventionProfileAntivirusOverride(dict):
+    def __init__(__self__, *,
+                 action: str,
+                 protocol: str):
+        """
+        :param str action: Threat action override. For some threat types, only a subset of actions applies.
+               Possible values are: `ALERT`, `ALLOW`, `DEFAULT_ACTION`, `DENY`.
+        :param str protocol: Required protocol to match.
+               Possible values are: `SMTP`, `SMB`, `POP3`, `IMAP`, `HTTP2`, `HTTP`, `FTP`.
+        """
+        pulumi.set(__self__, "action", action)
+        pulumi.set(__self__, "protocol", protocol)
+
+    @property
+    @pulumi.getter
+    def action(self) -> str:
+        """
+        Threat action override. For some threat types, only a subset of actions applies.
+        Possible values are: `ALERT`, `ALLOW`, `DEFAULT_ACTION`, `DENY`.
+        """
+        return pulumi.get(self, "action")
+
+    @property
+    @pulumi.getter
+    def protocol(self) -> str:
+        """
+        Required protocol to match.
+        Possible values are: `SMTP`, `SMB`, `POP3`, `IMAP`, `HTTP2`, `HTTP`, `FTP`.
+        """
+        return pulumi.get(self, "protocol")
+
+
 @pulumi.output_type
 class SecurityProfileThreatPreventionProfileSeverityOverride(dict):
     def __init__(__self__, *,

pulumi_gcp/networksecurity/security_profile.py

@@ -546,6 +546,10 @@ class SecurityProfile(pulumi.CustomResource):
                     "action": "ALLOW",
                     "threat_id": "280647",
                 }],
+                "antivirus_overrides": [{
+                    "protocol": "SMTP",
+                    "action": "ALLOW",
+                }],
             })
         ```
         ### Network Security Security Profile Mirroring
@@ -697,6 +701,10 @@ class SecurityProfile(pulumi.CustomResource):
                     "action": "ALLOW",
                     "threat_id": "280647",
                 }],
+                "antivirus_overrides": [{
+                    "protocol": "SMTP",
+                    "action": "ALLOW",
+                }],
             })
         ```
         ### Network Security Security Profile Mirroring

pulumi_gcp/organizations/__init__.py

@@ -14,6 +14,7 @@ from .get_client_open_id_user_info import *
 from .get_folder import *
 from .get_folders import *
 from .get_iam_custom_role import *
+from .get_iam_custom_roles import *
 from .get_iam_policy import *
 from .get_organization import *
 from .get_project import *

pulumi_gcp/organizations/get_iam_custom_roles.py

@@ -0,0 +1,164 @@
+# coding=utf-8
+# *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import copy
+import warnings
+import sys
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
+from .. import _utilities
+from . import outputs
+
+__all__ = [
+    'GetIamCustomRolesResult',
+    'AwaitableGetIamCustomRolesResult',
+    'get_iam_custom_roles',
+    'get_iam_custom_roles_output',
+]
+
+@pulumi.output_type
+class GetIamCustomRolesResult:
+    """
+    A collection of values returned by getIamCustomRoles.
+    """
+    def __init__(__self__, id=None, org_id=None, roles=None, show_deleted=None, view=None):
+        if id and not isinstance(id, str):
+            raise TypeError("Expected argument 'id' to be a str")
+        pulumi.set(__self__, "id", id)
+        if org_id and not isinstance(org_id, str):
+            raise TypeError("Expected argument 'org_id' to be a str")
+        pulumi.set(__self__, "org_id", org_id)
+        if roles and not isinstance(roles, list):
+            raise TypeError("Expected argument 'roles' to be a list")
+        pulumi.set(__self__, "roles", roles)
+        if show_deleted and not isinstance(show_deleted, bool):
+            raise TypeError("Expected argument 'show_deleted' to be a bool")
+        pulumi.set(__self__, "show_deleted", show_deleted)
+        if view and not isinstance(view, str):
+            raise TypeError("Expected argument 'view' to be a str")
+        pulumi.set(__self__, "view", view)
+
+    @property
+    @pulumi.getter
+    def id(self) -> str:
+        """
+        The provider-assigned unique ID for this managed resource.
+        """
+        return pulumi.get(self, "id")
+
+    @property
+    @pulumi.getter(name="orgId")
+    def org_id(self) -> Optional[str]:
+        return pulumi.get(self, "org_id")
+
+    @property
+    @pulumi.getter
+    def roles(self) -> Sequence['outputs.GetIamCustomRolesRoleResult']:
+        """
+        A list of all retrieved custom roles roles. Structure is defined below.
+        """
+        return pulumi.get(self, "roles")
+
+    @property
+    @pulumi.getter(name="showDeleted")
+    def show_deleted(self) -> Optional[bool]:
+        return pulumi.get(self, "show_deleted")
+
+    @property
+    @pulumi.getter
+    def view(self) -> Optional[str]:
+        return pulumi.get(self, "view")
+
+
+class AwaitableGetIamCustomRolesResult(GetIamCustomRolesResult):
+    # pylint: disable=using-constant-test
+    def __await__(self):
+        if False:
+            yield self
+        return GetIamCustomRolesResult(
+            id=self.id,
+            org_id=self.org_id,
+            roles=self.roles,
+            show_deleted=self.show_deleted,
+            view=self.view)
+
+
+def get_iam_custom_roles(org_id: Optional[str] = None,
+                         show_deleted: Optional[bool] = None,
+                         view: Optional[str] = None,
+                         opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetIamCustomRolesResult:
+    """
+    Get information about a Google Cloud Organization IAM Custom Roles.
+    Note that you must have the `roles/iam.organizationRoleViewer`.
+    See [the official documentation](https://cloud.google.com/iam/docs/creating-custom-roles)
+    and [API](https://cloud.google.com/iam/docs/reference/rest/v1/organizations.roles/list).
+
+    ```python
+    import pulumi
+    import pulumi_gcp as gcp
+
+    example = gcp.organizations.get_iam_custom_roles(org_id="1234567890",
+        show_deleted=True,
+        view="FULL")
+    ```
+
+
+    :param str org_id: The numeric ID of the organization.
+    :param bool show_deleted: Include Roles that have been deleted. Defaults to `false`.
+    :param str view: When `"FULL"` is specified, the `permissions` field is returned, which includes a list of all permissions in the role. The default value is `"BASIC"`, which does not return the `permissions`.
+    """
+    __args__ = dict()
+    __args__['orgId'] = org_id
+    __args__['showDeleted'] = show_deleted
+    __args__['view'] = view
+    opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke('gcp:organizations/getIamCustomRoles:getIamCustomRoles', __args__, opts=opts, typ=GetIamCustomRolesResult).value
+
+    return AwaitableGetIamCustomRolesResult(
+        id=pulumi.get(__ret__, 'id'),
+        org_id=pulumi.get(__ret__, 'org_id'),
+        roles=pulumi.get(__ret__, 'roles'),
+        show_deleted=pulumi.get(__ret__, 'show_deleted'),
+        view=pulumi.get(__ret__, 'view'))
+def get_iam_custom_roles_output(org_id: Optional[pulumi.Input[Optional[str]]] = None,
+                                show_deleted: Optional[pulumi.Input[Optional[bool]]] = None,
+                                view: Optional[pulumi.Input[Optional[str]]] = None,
+                                opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetIamCustomRolesResult]:
+    """
+    Get information about a Google Cloud Organization IAM Custom Roles.
+    Note that you must have the `roles/iam.organizationRoleViewer`.
+    See [the official documentation](https://cloud.google.com/iam/docs/creating-custom-roles)
+    and [API](https://cloud.google.com/iam/docs/reference/rest/v1/organizations.roles/list).
+
+    ```python
+    import pulumi
+    import pulumi_gcp as gcp
+
+    example = gcp.organizations.get_iam_custom_roles(org_id="1234567890",
+        show_deleted=True,
+        view="FULL")
+    ```
+
+
+    :param str org_id: The numeric ID of the organization.
+    :param bool show_deleted: Include Roles that have been deleted. Defaults to `false`.
+    :param str view: When `"FULL"` is specified, the `permissions` field is returned, which includes a list of all permissions in the role. The default value is `"BASIC"`, which does not return the `permissions`.
+    """
+    __args__ = dict()
+    __args__['orgId'] = org_id
+    __args__['showDeleted'] = show_deleted
+    __args__['view'] = view
+    opts = pulumi.InvokeOutputOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke_output('gcp:organizations/getIamCustomRoles:getIamCustomRoles', __args__, opts=opts, typ=GetIamCustomRolesResult)
+    return __ret__.apply(lambda __response__: GetIamCustomRolesResult(
+        id=pulumi.get(__response__, 'id'),
+        org_id=pulumi.get(__response__, 'org_id'),
+        roles=pulumi.get(__response__, 'roles'),
+        show_deleted=pulumi.get(__response__, 'show_deleted'),
+        view=pulumi.get(__response__, 'view')))

pulumi_gcp/organizations/outputs.py

@@ -30,6 +30,7 @@ __all__ = [
     'GetIAMPolicyAuditConfigAuditLogConfigResult',
     'GetIAMPolicyBindingResult',
     'GetIAMPolicyBindingConditionResult',
+    'GetIamCustomRolesRoleResult',
     'GetSOrganizationResult',
 ]
 
@@ -677,6 +678,101 @@ class GetIAMPolicyBindingConditionResult(dict):
         return pulumi.get(self, "description")
 
 
+@pulumi.output_type
+class GetIamCustomRolesRoleResult(dict):
+    def __init__(__self__, *,
+                 deleted: bool,
+                 description: str,
+                 id: str,
+                 name: str,
+                 permissions: Sequence[str],
+                 role_id: str,
+                 stage: str,
+                 title: str):
+        """
+        :param bool deleted: The current deleted state of the role.
+        :param str description: A human-readable description for the role.
+        :param str id: an identifier for the resource with the format `organizations/{{org_id}}/roles/{{role_id}}`.
+        :param str name: The name of the role in the format `organizations/{{org_id}}/roles/{{role_id}}`. Like `id`, this field can be used as a reference in other resources such as IAM role bindings.
+        :param Sequence[str] permissions: The names of the permissions this role grants when bound in an IAM policy.
+        :param str role_id: The camel case role id used for this role.
+        :param str stage: The current launch stage of the role. List of possible stages is [here](https://cloud.google.com/iam/reference/rest/v1/organizations.roles#Role.RoleLaunchStage).
+        :param str title: A human-readable title for the role.
+        """
+        pulumi.set(__self__, "deleted", deleted)
+        pulumi.set(__self__, "description", description)
+        pulumi.set(__self__, "id", id)
+        pulumi.set(__self__, "name", name)
+        pulumi.set(__self__, "permissions", permissions)
+        pulumi.set(__self__, "role_id", role_id)
+        pulumi.set(__self__, "stage", stage)
+        pulumi.set(__self__, "title", title)
+
+    @property
+    @pulumi.getter
+    def deleted(self) -> bool:
+        """
+        The current deleted state of the role.
+        """
+        return pulumi.get(self, "deleted")
+
+    @property
+    @pulumi.getter
+    def description(self) -> str:
+        """
+        A human-readable description for the role.
+        """
+        return pulumi.get(self, "description")
+
+    @property
+    @pulumi.getter
+    def id(self) -> str:
+        """
+        an identifier for the resource with the format `organizations/{{org_id}}/roles/{{role_id}}`.
+        """
+        return pulumi.get(self, "id")
+
+    @property
+    @pulumi.getter
+    def name(self) -> str:
+        """
+        The name of the role in the format `organizations/{{org_id}}/roles/{{role_id}}`. Like `id`, this field can be used as a reference in other resources such as IAM role bindings.
+        """
+        return pulumi.get(self, "name")
+
+    @property
+    @pulumi.getter
+    def permissions(self) -> Sequence[str]:
+        """
+        The names of the permissions this role grants when bound in an IAM policy.
+        """
+        return pulumi.get(self, "permissions")
+
+    @property
+    @pulumi.getter(name="roleId")
+    def role_id(self) -> str:
+        """
+        The camel case role id used for this role.
+        """
+        return pulumi.get(self, "role_id")
+
+    @property
+    @pulumi.getter
+    def stage(self) -> str:
+        """
+        The current launch stage of the role. List of possible stages is [here](https://cloud.google.com/iam/reference/rest/v1/organizations.roles#Role.RoleLaunchStage).
+        """
+        return pulumi.get(self, "stage")
+
+    @property
+    @pulumi.getter
+    def title(self) -> str:
+        """
+        A human-readable title for the role.
+        """
+        return pulumi.get(self, "title")
+
+
 @pulumi.output_type
 class GetSOrganizationResult(dict):
     def __init__(__self__, *,